glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex

Description

This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.

Recommendation

Update the glob-parent package to the latest compatible version. Followings are version details:

Affected version(s): >= 4.0.0, < 5.1.2
Patched version(s): 5.1.2

References

GHSA-ww39-953v-wcq6
snyk.io
www.oracle.com
CVE-2020-28469
CWE-400
CAPEC-310
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for glob-parent vulnerable to Regular Expression Denial of Service in enclosure regex and gives you actionable findings to investigate.

Start a free scan

Related Issues

glob-parent 6.0.0 vulnerable to Regular Expression Denial of Service - CVE-2021-35065
Regular expression denial of service in url-regex - CVE-2020-7661
is_js vulnerable to Regular Expression Denial of Service - CVE-2020-26302
insane vulnerable to Regular Expression Denial of Service - CVE-2020-26303

How to Secure your NodeJs Express Javascript Application - part 1

How to Secure your NodeJs Express Javascript Application - part 2

10 Secure Coding Best Practices to Follow in Every Project

See something that needs correcting? Let us knowUpdated June 27, 2024